Which is besides the point and a minor nitpick at best.

The fact of the matter is these techniques are well established black hat ways of preventing the user from discovering what you're doing on their device.

Discovering what exactly? To bad they don't use a subdomain called "adplayback" I guess, but the query parameters are obviously only useful for YouTube internal, not the users.

And I won't even call them "obfuscated" -- it's just a batch of switches and plain IP and ID hash.

But it's googlevideo.com, how could it be a video of some shyster pimping get-rich-quick investment schemes that are convincing enough to appear totally legit to anyone below the half-way point of the bell curve?

But it's a google ad, how could it link to a scam that looks exactly like my bank's website?

We're talking about why this URL does not look like malware. The content of the video itself is irrelevant.